A framework for public-channel cryptography using chaotic lasers 
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Two mutually coupled chaotic diode lasers with individual external feedback, are shown to es- 
tablish chaos synchronization in the low-frequency fluctuations regime. A third laser with identical 
external feedback but coupled unidirectionally to one of the pair does not synchronize. Both exper- 
iments and simulations reveal the existence of a window of parameters for which synchronization by 
mutual coupling is possible but synchronization by unidirectional coupling is not. This parameter 
space forms the basis of a proposed public-channel cryptographic scheme and is robust to various 
possible attacks. 
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PACS numbers: 

A semiconductor (diode) laser subjected to delayed 
optical feedback is a well known example of a nonlin- 
ear oscillator that displays chaotic oscillations. Differ- 
ent regimes of chaos, depending on feedback strength 
and driving current are obtained in lasers with exter- 
nal feedback. For low driving currents and moderate 
feedback, characteristic intensity breakdowns known as 
low-frequency fluctuations (LFFs) are typically observed 

Q 

Chaos synchronization has attracted a lot of inter- 
est recently because of its potential application in op- 
tical communication Q. Chaos synchronization for 
two external-feedback lasers coupled unidirectionally has 
been demonstrated experimentally and theoretically in 
0,0]. However, mutually coupled semiconductor lasers 
were mainly considered in the so called face-to-face con- 
figuration where both lasers are solitary (i.e. they are 
not subjected to individual optical or electronic feedback) 
0, 0, 0, @] ■ These studies revealed interesting dynamics 
regimes including anticipated and retarded synchroniza- 
tion and leader-laggard dynamics. 

One of the most studied applications of chaos synchro- 
nization in communication systems is a private-key cryp- 
tographical system, where the two communicating par- 
ties have a common secret key prior to the communi- 
cation process, which they use to encrypt the transmit- 
ted messages. In optical communication, unidirectionally 
coupled lasers are synchronized in a master-slave config- 
uration, and the secret key is the system parameters 0- 
The two communicating lasers must have identical (or at 
least similar) parameters, or else synchronization is im- 
possible. The information is added to the synchronized 
signal and recovered in a chaos pass filter procedure @. 
If an eavesdropping attacker (a third laser) , manages to 
reveal the parameters, the security of the system is bro- 
ken. 

In many applications, the two communicating parties 
do not have a common private-key, and for secure com- 
munication must use public-channel cryptography, where 
all the information is public. Public-channel crypto- 
graphic methods that are used today, such as RSA |1CM | . 
are based on number theory, and implemented in soft- 
ware. In this paper we present for the first time a frame- 



work for all-optical public-channel cryptography. The 
advantages of an all-optical device implemented in hard- 
ware is straightforward. 

We use two mutually coupled external-feedback lasers 
to establish chaos synchronization in the LFF regime. 
Once the two communicating lasers are synchronized, 
and have identical time varying signals, they can use 
the signal to mask a message in some sophisticated way. 
As we are proposing a public — channel system, all the 
macroscopic parameters of the system are public knowl- 
edge, and known to the attacker as well. Of course, if all 
the parameters are known, the parties cannot use the sig- 
nal itself to hide the message, rather the transmitted sig- 
nal consists of a non-linear combination of time-delayed 
values. Such a signal conceals the original signal, but still 
maintains the synchronization. 

An attacker wishing to decrypt the message must man- 
age to synchronize with the parties (using the same pa- 
rameters), so that he can generate the same decoding 
signal. We show that a third laser with identical ex- 
ternal feedback but coupled unidirectionally to one of 
the communicating lasers, does not synchronize with the 
pair. The asymmetry, whereby the two mutually cou- 
pled lasers synchronize while the third laser does not, is 
caused by the fact that the third laser is unidirectionally 
coupled and does not influence the process ^jj- This ad- 
vantage of mutual coupling over unidirectional coupling 
appears in a certain window of parameters. 

Our experimental setup is shown schematically in Fig. 

We use 3 single-mode lasers, A, B and C, emitting at 
660 nm and operating close to their threshold. The tem- 
perature of each laser is stabilized to better than 0.01K 
and all are subjected to a similar optical feedback. The 
length of the external feedback path is equal for all lasers 
and is set to 90 cm (round trip time Td = 6 ns). The feed- 
back strength of each laser is adjusted using a A/4 wave 
plate and a polarizing beam splitter and is set to about 
10% of the laser's power. Two lasers (^4 and B) are mutu- 
ally coupled by injecting 5% of the output power to each 
of them . The coupling optical path is set to 8 m (t c 
= 27 ns). The attacker laser (C) is fed unidirectionally 
by one of the mutually coupled lasers. Unidirectionality 
is ensured by an optical diode (-40 dB) which prevents 
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Figure 1: Schematic diagram of trie experimental setup. 
Lasers A and B are mutually coupled, and C is the attacker. 
BS - beam splitters; PBS - polarization beam splitters; OD - 
optical isolator; PD - photodetectors. 



feedback. Three fast photodetectors (response time < 
500 ps) monitor the laser intensities which are simulta- 
neously recorded by a digital oscilloscope. 

A typical time sequence of the three laser intensities is 
shown in Fig. [2 The attacker, is shown in green while 
the mutually coupled lasers, A and B, are in red and 
blue. A pronounced time correlation of LFF breakdowns 
is a manifestation of the synchronization of A and B. A 
detailed discussion of this mutual synchronization will be 
given below. Now we concentrate on the striking differ- 
ences between the signal of laser C and that of lasers A 
and B. Laser C succeeds in synchronizing with A and 
B occasionally, but frequently, additional breakdowns, 
which are absent in A and B appear in the sequence 
of C. Thus it fails to follow the pair of mutually coupled 
lasers in a reliable manner. The parameters of laser C, 
such as temperature, driving current, feedback and cou- 
pling strengths were carefully adjusted to be identical to 
the other two lasers. In practice we exercised the fol- 
lowing experimental procedure. We verified that laser C 
can be synchronized unidirectionally to a single master 
(either laser A or B). A fine tuning of all laser C pa- 
rameters was made to achieve the best synchronization 
possible . Then we allowed the weak mutual coupling of 
lasers A and B and observed that the synchronization of 
laser C degrades immediately. Trying to fine tune laser 
C parameters, so as to obtain better attacker synchro- 
nization did not improve the quality of synchronization. 
We were able to realize a high level of synchronization 
if either the coupling of laser C to the communicating 
pair was significantly increased or the feedback to laser 
C was considerably reduced. But in this situation the C 
laser parameters were so different from the parameters of 
A and B that it could not possibly be used to decipher 
information as discussed below. 

To model the single-mode semiconductor lasers we 
used the Lang Kobayashi differential equations, as de- 
fined in For the dynamics parameters we used the 
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Figure 2: A time sequence of all three laser intensities. Lasers 
A and B are shown in blue and red while the attacker, laser 
C, is in green. The attacker shows numerous failures in its at- 
tempt to follow the well established correlation in LFF break- 
downs between the two parties. 




Figure 3: Numeric simulation results. A typical sequence 
of the amplitude \E\, without LFF, for the attacker and the 
parties with k — a — 10 10 s _1 . The signals of the paries are 
overlapping and therefore are indistinguishable. 



values in 0|. The external feedback strength is defined 
by k and the coupling strength of lasers A and B and 
the attacker to A or B is defined by a. The calculated 
sequences behaved exactly as those observed experimen- 
tally in the LFF regime. The interval between break- 
downs can be controlled by k and a. The synchroniza- 
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Figure 4: Success or failure of synchronization for the parties 
and the attacker for a range of parameter values k and o. 
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Figure 5: Schematic cryptographic setup . Parties A and 
B and the attacker, C, receive external feedback of strength 
k. The mutual signals, ct/a^) and c/b(£), consists of a linear 
combination of three delayed signals, cr/s (t) is also used as an 
external input to the attacker C. The naive way to cipher the 
message, using a linear combination of time delayed signals 
of laser A and nonlinearity is depicted in orange. 



tion of lasers A and B is robust to small differences in the 
parameters 0] . Furthermore lasers A and B were found 
to be synchronized in between the LFF breakdowns. For 
small K and a chaotic synchronization is also possible in 
the regime without LFF breakdowns. Fig. displays a 
typical sequence of amplitudes of all three lasers in this 
regime with r c = r<j = 10ns. Note that lasers A and B 
are indistinguishable in the picture. 

We now discuss the two dimensional phase space, de- 
fined by parameters k and a. The examined phase space 
is characterized by the following three regimes as de- 
picted in Fig. Q] The red regime where a is strong 
enough in comparison to k, and all lasers are synchro- 
nized. The black regime where the coupling is negligible 
and there is a lack of synchronization between any of 
the lasers. Most interesting is the window of the light 
blue regime where A and B are synchronized, but C fails 
to synchronize. This regime represents an intermediate 
window where mutual coupling is superior to a unidirec- 
tional coupling 0|- This new effect is at the center of 
our cryptographic system presented below. 

In our cryptographic system, the coupling signal, 
Ja (t) , is a linear combination of time delayed signals of 
the laser, Eji(t), as defined in Eq. 1 (and similarly for 
laser B). The initial reason for using a complicated sig- 
nal, fA{t), is that in this way the original signal £U(i) 
remains secret and can be used to mask a message. Us- 
ing Ja (t) as the coupling signal serves an additional pur- 
pose: the attacker is forced to use exactly the same cou- 
pling strength a as the parties. He cannot amplify his 
coupling so as to force synchronization because when he 
does so, he only synchronizes with f A (t) as the output 
of the laser, instead of EA(t). Laser C must have the 
same "heart beats" and the same internal "flows" in all of 
its internal optical "wires", as the synchronized lasers, A 
and B, otherwise the beam it constructs to decrypt the 



message is essentially different from EA(t). The use of a 
combination of time-delayed values as the coupling sig- 
nal between the parties thus accomplishes two necessary 
tasks: it hides the original signal of the laser so that we 
can use it to mask a message, and it prevents the attacker 
from using a stronger coupling so as to synchronize. 

A prototypical cryptographic setup is shown in Fig. 
Each of the three lasers has external feedback of strength 
k with time delay r. The transmitted signal of each of 
the two lasers, and /s(i), consists of a linear com- 

bination of the time delayed laser signals 

f A {t)=EA{t-T 1 )+E A (t-T2)+E A (t-T 3 )... (1) 

and similarly for laser B. In our simulations we have seen 
that using a combination of time delays and nonline arity 
does not disturb the synchronization of A and B fl?j . I"15l |. 
The attacker, C, tries to imitate one of the mutually cou- 
pled lasers, hence it will use as input afsit), for instance, 
and feedback characterized by k and r. 

The part of the publicly known setup required to con- 
ceal the message, in addition to the synchronization pro- 
cess is marked in orange in Fig. Two (or in general 
more than two) delayed signals are summed and can be 
further complicated by optional nonlinear terms. The 
resulting beam is used to cipher the message, which is 
subsequently transmitted to the other party. Party B, 
who is synchronized to party A, can easily generate an 
identical beam to the one used to cipher the message. 
Subtracting this beam from the received signal immedi- 
ately reveals the transmitted message. 

A possible attack on the communication channel is via 
the use of a chaos pass filter on the encrypted signal (the 
orange dashed line in Fig. EJ. In this strategy, the at- 
tacker uses the encrypted transmitted message as an ex- 
ternal input to a laser whose output is expected to be the 
chaotic signal without residues of the message Q. The 
attacker can then subtract this chaotic signal from the 
encrypted message and reveal the message. This strat- 
egy was shown to work with a simple, single frequency 
continuous- wave message only 0, It would fail if a 
broadband message is used such as a compressed mes- 
sage or alternatively a message which is modulated over a 
large bandwidth. In addition, if the message is ciphered 
with a non- linear function of time delayed signals, and 
not with the simple laser output, EA(t), it also prevents 
the successful application of chaos pass filtering. 

Another possible attack strategy is to derive the orig- 
inal signal E A (t) from the transmitted signal /a(*), by 
using some mathematical analysis method, such as em- 
bedding of the time-delayed values. Such an embedding 
method was shown to be unsuccessful, especially when 
stochastic ingredients were added to the dynamics [Tfll |. 
Here too the lasers are governed by a stochastic process, 
and thus a mathematical analysis is useless. 

Let us now discuss the synchronization of two mutu- 
ally coupled lasers in detail. A close examination of Fig. 
2 (blue and red traces) reveals that the LFF breakdowns 
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Figure 6: Histogram of time delay /anticipation of power 
breakdowns of two parties (lasers A and B). Two strong peaks 
at exactly the coupling time between the two parties (r c =27 
ns) include 57% of registered events (master/slave configu- 
ration). However another 43% of the events fall between 
the peaks showing synchronization regime beyond the mas- 
ter/slave configuration. 

are not perfectly correlated up to the time window of 
the coupling lengths between the lasers. This intriguing 
dynamics is summarized in an histogram of power break- 
down correlations as shown in Fig. 6. Two different syn- 
chronization regimes can be readily distinguished. The 
first one is characterized by a constant lag/lead time be- 
tween power breakdowns which corresponds to the cou- 
pling time t c . In Fig. 6 this corresponds to the two 
narrow peaks (±27 ns) which include about 57% of all 
registered events. This type of synchronization known as 
a master / slave (leader /laggard) configuration was shown 



in unidirectional coupling [3] as well as in mutual cou- 
pling without external feedback ij. The heights of the 
two peaks are nearly equal which means that the leading 
role is equally distributed between the lasers (the sys- 
tem is symmetric). The second synchronization regime, 
which covers another 43% of events is characterized by a 
lead/lag time which is less than t c and equally distributed 
in the time interval between and ±r c . In this situa- 
tion neither of the lasers is master or slave and the syn- 
chronization enters the regime which is beyond the mas- 
ter/slave treatment. The mutually coupled lasers jump 
randomly throughout both synchronization regimes. For 
the communication scheme presented here the mutually 
coupled lasers have to operate outside the leader/laggard 
regime. For this the careful mode matching of two lasers 
achieved by fine tuning of temperature and current is 
crucial. In our simulations we observed exactly the same 
synchronization regimes. We saw that when using t c = t& 
the parties display only the second synchronization (with 
no leader/laggard) [13]. 

To conclude, we have presented a framework for a 
public-channel cryptographic system, based on two mu- 
tually coupled lasers. The system proposed here opens a 
manifold of possibilities. For instance, the extension of 
our framework to generate secret communication among 
a group of more than two lasers. There are many details 
in this systems that deserve further experimental and 
theoretical research - the sensitivity of the synchroniza- 
tion to the parameters such as time delays, non-linearity, 
the carefully matched laser parameters and the distance 
between the lasers. Also the ciphering of the message 
using the synchronized signal, deserves further investiga- 
tion and is open to different implementations. 
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